v0.6.0

• Added first-class raw QUIC client mTLS support through the public connectQuic() and connectQuicAsync() options, including cert/key validation and explicit ERR_HTTP3_TLS_CONFIG_ERROR failures for invalid TLS input.
• Added raw QUIC server-side client certificate policy control with clientAuth: 'none' | 'request' | 'require', defaulting to require whenever a client-verification ca is configured.
• Added peer-certificate inspection on QuicServerSession with peerCertificatePresented, getPeerCertificate(), and getPeerCertificateChain() so applications can pin exact client certificates after CA verification.
• Updated the raw QUIC API contract, configuration reference, and QUIC guide with explicit mTLS examples, server policy semantics, and a documented certificate-pinning pattern.